Логотип exploitDog
product: "firefox"
Консоль
Логотип exploitDog

exploitDog

product: "firefox"
Mozilla Firefox

Mozilla Firefoxсвободный браузер на движке Gecko

Релизный цикл, информация об уязвимостях

Продукт: Mozilla Firefox
Вендор: mozilla

График релизов

11511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414520232024202520262027

Недавние уязвимости Mozilla Firefox

Количество 15 220

debian логотип

CVE-2024-6610

больше 1 года назад

Form validation popups could capture escape key presses. Therefore, sp ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2024-6609

больше 1 года назад

When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2024-6609

больше 1 года назад

When almost out-of-memory an elliptic curve key which was never alloca ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2024-6608

больше 1 года назад

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2024-6608

больше 1 года назад

It was possible to move the cursor using pointerlock from an iframe. T ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2024-6607

больше 1 года назад

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2024-6607

больше 1 года назад

It was possible to prevent a user from exiting pointerlock when pressi ...

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2024-6606

больше 1 года назад

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 8.2
EPSS: Низкий
debian логотип

CVE-2024-6606

больше 1 года назад

Clipboard code failed to check the index on an array access. This coul ...

CVSS3: 8.2
EPSS: Низкий
nvd логотип

CVE-2024-6605

больше 1 года назад

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2024-6610

Form validation popups could capture escape key presses. Therefore, sp ...

CVSS3: 4.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-6609

When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 8.8
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-6609

When almost out-of-memory an elliptic curve key which was never alloca ...

CVSS3: 8.8
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-6608

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 4.3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-6608

It was possible to move the cursor using pointerlock from an iframe. T ...

CVSS3: 4.3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-6607

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 8.8
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-6607

It was possible to prevent a user from exiting pointerlock when pressi ...

CVSS3: 8.8
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-6606

Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVSS3: 8.2
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-6606

Clipboard code failed to check the index on an array access. This coul ...

CVSS3: 8.2
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.

CVSS3: 8.8
0%
Низкий
больше 1 года назад

Уязвимостей на страницу


Поделиться